PCT/IB99/011b4 

LATENT COOPERATION TP^TY 



From the INTERNATIONAL BUREAU 



PCT 

NOTIFICATION OF ELECTION 

(PCT Rule 61.2) 


To: 

Commissioner 

US Department of Commerce 
United States Patent and Trademark 
Office, PCT 

2011 South Clark Place Room 
CP2/5C24 

Arlington, VA 22202 
ETATS-UNIS D'AMERIQUE 

in-its capacity as elected Office 


Date of mailing (day/month/year) 

19 December 2000 (19.12.00) 


International application No. 
PCT/IB99/01164 


Applicant's or agent's file reference 
PDC/AB/20694 


International filing date (day/month/year) 

08 June 1999 (08.06.99) 


Priority date (day/month/year) 
08 June 1998 (08.06.98) 


Applicant 

DECLERCK, Christophe 



1. The designated Office is hereby notified of its election made: 

| X| in the demand filed with the International Preliminary Examining Authority on: 

24 November 1999 (24.11.99) 



| | in a notice effecting later election filed with the International Bureau on: 



The election | X | was 

| | was not 

made before the expiration of 1 9 months from the priority date or, where Rule 32 applies, within the time limit under 
Rule 32.2(b). 



The International Bureau of WIPO 
34, chemin des Colombettes 
1211 Geneva 20, Switzerland 



Facsimile No.: (41-22) 740.14.35 



Authorized officer 

Peggy Steunenberg 

Telephone No.: (41-22) 338.83.38 



. DrT/ID/-i?1 / li.K. 1OO0\ 



3731765 



PATENT COOPERATION TREATY 



From the 

INTERNATIONAL PRELIMINARY EXAMINING AUTHORITY 



To: 



COZENS, Paul, Dennis ^ , y;-; 'r or- 
Mathys & Squire '•• - j * . . , A v_ 

100 Gray's Inn Road {] q s * < - * - - - 

London WC1X8AL , " ' " 1 

GRANDE BRETAGNB;£p L Y D ATEv5Vl| CO 



PCT 




NOTIFICATION OF TRANSMITTAL OF 
fflE9iNTERT^JAi\tp^lZ.oBailMINARY 

»%)&Mirwficfa REPORT 

(PCT Rule 71.1) 



Date of mailing 
(day/month/year) 



02.06.2000 



Applicant's or agenf s file reference 
PDC/AB/20694 



IMPORTANT NOTIFICATION 



International application No. 
PCT/IB99/01164 
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1 The applicant is hereby notified that this International Preliminary Examining Authority transmits herewith the 
international preliminary examination report and its annexes, if any, established on the international application. 

2. A copy of the report and its annexes, if any, is being transmitted to the International Bureau for communication 
to all the elected Offices. 

3. Where required by any of the elected Offices, the International Bureau will prepare an English translation of the 
report (but not of any annexes) and will transmit such translation to those Offices. 

4. REMINDER * 

The applicant must enter the national phase before each elected Office by performing certain acts (filing 
translations and paying national fees) within 30 months from the priority date (or later in some Offices) (Article 
39(1)) (see also the reminder sent by the International Bureau with Form PCT/IB/301). 

Where a translation of the international application must be furnished to an elected Office, that translation must 
contain a translation of any annexes to the international preliminary examination report. It is the applicant s 
responsibility to prepare and furnish such translation directly to each elected Office concerned. 

For further details on the applicable time limits and requirements of the elected Offices, see Volume II of the 
PCT Applicant's Guide. 
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FOR FURTHER ACTION 



See Notification of Transmittal of International 
Preliminary Examination Report (Form PCT/IPEA/416) 



International application No. 
PCT/IB99/01164 



International filing date (day/month/year) 
08/06/1999 



Priority date (day/month/year) 
08/06/1998 



International Patent Classification (IPC) or national classification and IPC 
H04N5/00 



Applicant 

CANAL+SOCIETE ANONYME et al. 



1 . This international preliminary examination report has been prepared by this International Preliminary Examining Authority 
and is transmitted to the applicant according to Article 36. 

2. This REPORT consists of a total of 8 sheets, including this cover sheet. 

□ This report is also accompanied by ANNEXES, i.e. sheets of the description, claims and/or drawings which have 
been amended and are the basis for this report and/or sheets containing rectifications made before this Authority 
(see Rule 70.16 and Section 607 of the Administrative Instructions under the PCT). 

These annexes consist of a total of sheets. 



3. This report contains indications relating to the following items: 



I 




Basis of the report 


II 


□ 


Priority 


III 




Non-establishment of opinion with regard to novelty, inventive step and industrial applicability 


IV 


□ 


Lack of unity of invention 


V 


is 


Reasoned statement under Article 35(2) with regard to novelty, inventive step or industrial applicability 






citations and explanations suporting such statement 


VI 




Certain documents cited 


VII 


E) 


Certain defects in the international application 


VIII 




Certain observations on the international application 



Date of submission of the demand 

24/11/1999 
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Date of completion of this report 
02.06.2000 


Name and mailing address of the international 
preliminary examining authority: 

European Patent Office 

/SSj D-80298 Munich 

Tel. +49 89 2399 - 0 Tx: 523656 epmu d 
Fax: +49 89 2399 - 4465 


Authorized otttcer / ^?^ ocs '* i ^s v 
McGrath. S (C ^ }) 

Telephone No. +49 89 2399 8961 



Form PCT/IPEA/409 (cover sheet) (January 1994) 



INTERNATIONAL PRELIMINARY DPT/inoQ/ni ifiA 

EXAMINATION REPORT Inte rnational application No. PU I /IBtfWUI 1 t>4 

I. Basis of the report 

1 This report has been drawn on the basis of {substitute sheets which have been furnished to the receiving Office in 
L^se^n invitation under Article 14 are referred to in this report as 'originally filed" and are not annexed to 

the report since they do not contain amendments.): 

Description, pages: 

1 _29 as originally filed 

Claims, No.: 

1 -43 as originally filed 

Drawings, sheets: 

1/7-7/7 as originally filed 



2. The amendments have resulted in the cancellation of: 

□ the description, pages: 

□ the claims, Nos.: 

□ the drawings, sheets: 

3. □ This report has been established as if (some of) the amendments had not been made, since they have been 

considered to go beyond the disclosure as filed (Rule 70.2(c)): 



4. Additional observations, if necessary: 



III. 



Non-establishment of opinion with regard to novelty, inventive step and industrial applicability 



The questions whether the claimed invention appears to be novel, to involve an inventive step (to be non-obvious), 
or to be industrially applicable have not been examined in respect of: 

□ the entire international application. 
H claims Nos. 41-43. 

because: 
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INTERNATIONAL PRELIMINARY 

EXAMINATION REPORT International application No. PCT/IB99/01 1 64 



□ the said international application, or the said claims Nos. relate to the following subject matter which does 
not require an international preliminary examination (specify): 



63 the description, claims or drawings (indicate particular elements beloW) or said claims Nos. are so unclear 
that no meaningful opinion could be formed (specify): 



see separate sheet 



□ the claims, or said claims Nos. are so inadequately supported by the description that no meaningful opinion 
could be formed. 

□ no international search report has been established for the said claims Nos. . 



V. Reasoned statement under Article 35(2) with regard to novelty, inventive step or industrial 
applicability; citations and explanations supporting such statement 

1. Statement 

Novelty (N) Yes: Claims 7,21,31 

No: Claims 1-6,8-20,22-30,32-40 

Inventive step (IS) Yes: Claims 

No: Claims 1-40 

Industrial applicability (IA) Yes: Claims 1-40 

No: Claims 



2. Citations and explanations 



see separate sheet 



VI. Certain documents cited 



1. Certain published documents (Rule 70.10) 



and / or 



2. Non-written disclosures (Rule 70.9) 



see separate sheet 
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VII. Certain defects in the international application 

The following defects in the form or contents of the international application have been noted: 
see separate sheet 

VIII. Certain observations on the international application 

The following observations on the clarity of the claims, description, and drawings or on the question whether the 
claims are fully supported by the description, are made: 

see separate sheet 
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INTERNATIONAL PRELIMINARY International application No. PCT/IB99/01 1 64 
EXAMINATION REPORT - SEPARATE SHEET 



Concerning Point III - No Opinion 

See the section "Concerning Point VIII - clarity" below, section 1. 
Concerning Point V - Reasoned Statement 

The following documents, cited in the International Search Report, are mentioned 
in this report: 

D1: WO 95 29560 A 
D2: WO 97 46008 A 

D3: 'FUNCTIONAL MODEL OF A CONDITIONAL ACCESS SYSTEM' 21 
December 1995 (1995-12-21) , EBU REVIEW- TECHNICAL, NR. 266, 
PAGE(S) 64 - 77 XP000559450 

1 . The subject-matter of claim 1 does not meet the requirements of Article 33(2) and 
Rule 64(1-3) PCT since it lacks novelty. 

D1, see in particular pages 7-8, discloses: 

a decoder for processing a transport packet stream comprising packetised data 
encapsulated within the packet payloads (Fig. 3), said decoder comprising: 

means suitable for receiving an identifier of a particular security module system 
from a portable security module - Fig. 3, blocks 31 , 30, 15, 17 & 21-24, see also 
page 7, lines 17-21; 

means for configuring the decoder in response to the received identifier - Fig. 3, 
31,16, 17, 30; 

means for receiving filter data for filtering packetised data associated with said 
particular security module system from said portable security module (page 8); 
and 

means for filtering said packetised data in response to said received filter data - 



Form PCT/Separate Sheet/409 (Sheet 1 ) (EPO- April 1997) 



INTERNATIONAL PRELIMINARY International application No. PCT/IB99/01 164 
EXAMINATION REPORT - SEPARATE SHEET 

Fig. 3, 15,30. 

The applicants' comments filed with their letter of 04.05.00 have been noted. 
However, the applicants appear to read more features into the wording of claim 1 
than can be fairly interpreted therein. Thus the applicants' arguments are not 
convincing. 

2. The subject-matter of the following claims does not meet the requirements of 
Article 33(2) and Rule 64(1-3) PCT since novelty is lacking in each case: 

claim 10 - see D1; 

claim 22 - see D1, Fig. 3 - furthermore virtually any smart card for such a video 
system has "means for" such operations; 
claim 25 - see D1 and point 1 . above; 
claim 35 - see D1; 

3. The following dependent claims do not appear to contain any additional features 
which, in combination with the features of any claim to which they refer, establish 
novelty or involve an inventive step: 

claim 2 - seeD1; 
claim 3 - see D1; 

claim 4- see D1, page 5, lines 11-15; 
claim 5 - see D1, Fig. 3, blocks 13 & 19; 
claims 6 & 30 - see D1 , page 7, lines 33-35; 

claims 7 & 31 - it is well-known in all fields of commerce, and pay tv is no 

exception, that credits may be offered for services and products - see also D3, p. 

73, top-left paragraph; 

claims 8 & 32 - see D1; 

claim 9 - seeD1; 

claims 11 & 36 - see D1; 

claim 12 - it is implicit in D1 that where a plurality of codes are recognized, there 
are conceptually a "plurality" of filters, since for each item to recognized the 
memory storing the data and the comparator form a filter, see also D2; 
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claims 13 & 33 - see D1; 
claims & 34 - see D1; 

claim 16 - it is implicit that configurable filters "can" be configured to filter or not 
filter any arbitrary data; 

claims 17 & 37 - see D1 , see the various busses in Fig. 3; 

claims 18 & 38 - see D1; 

claims 19 & 39 - see D1, pages 7-8; 

claims 20 & 40 - see D1; 

claim 21 - see D3, p. 72, top-left paragraph & p. 74 
claims 23,24- seeD1; 
claims 26-29- see D1. 



Concerning Point VI - Certain Documents 

Certain published documents (Rule 70.10) 



D4: 

Publication no. Publication date Filing date Priority date 

EP-A-0 910 217 21.04.99 05.10.98 14.10.97 



D5: 

Publication no. Publication date Filing date Priority date 

EP-A-0 893 913 27.01.99 24.07.97 



D6: 

Publication no. Publication date Filing date Priority date 

EP-A-0 884 906 16.12.98 08.06.98 10.06.97 



These documents, although not constituting prior art within the meaning of Rule 
64.1(b) PCT, appear to disclose all of the features of the following claims 
respectively: 



D4- 1-4 

D5- 1,10,22,25,35 
D6- 1,10,22,25,35 
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No check has been made as to whether the priorities of these prior applications 
have been validly claimed, where appropriate. 

Concerning Point VII - Certain Defects 

1 . The requirements of Rule 6.3(b) PCT are not met since the independent claims 
are not properly cast in the two part form, according to which those features which 
in combination are part of the prior art are placed in the preamble. 

2. The requirements of Rule 5.1 (a)(ii) & (iii) PCT are not met since the background 
art, useful for understanding the invention, eg the documents mentioned above, 
have not been acknowledged in the description and the technical problems and 
any advantageous effects have not yet been stated in comparison to this 
background art. 

3. The requirements of Rule 6.2(b) PCT are not met since reference signs are not 
used in the claims. It is considered that their presence would significantly aid the 
understanding of the claims. 



Concerning Point VIII - Certain Observations 

1 . The subject-matter of claims 41 -43 lacks clarity and therefore does not meet the 
requirements of Article 6 PCT. See also Rule 6.2(a) PCT. 

2. It should be noted that "means for" features are interpreted as being merely 
means suitable for - see PCT Guidelines III, 4.8 

3. Claims 1 2 and 1 3 lack clarity (Art. 6 PCT) since they depend on claim 9 which 
lacks an antecedent for first and second filters. 

4. Claim 17 lacks clarity (Art. 6 PCT) since it lacks an antecedent for "security 
module" which casts doubt on the claim and all the claims which are dependent 
on it. 



Form PCT/Separate Sheet/409 (Sheet 4) (EPO-April 1997) 



PATENT COOPERATION TREAJ 

PCT 



INTERNATIONAL SE7W€H ^iedjTj o 

(PCT Article 18 and Rules 43 and 44) 



Applicant's or agent's (He reference 

PDC/AB/20694 


cr»n CI I PTH P a see Notification of Transmittal of International Search Report 
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ACTION 


International application No. 

PCT/IB 99/01164 


International' filing date (day/month/year) 1 (Earliest) Priority Date (day/month/year) 

08/06/1999 08/06/1998 


Applicant 

CANAL+SOCIETE ANONYME et al . 



This international Search Report has been prepared by this International Searching Authority and is transmitted to the applicant 
according to Article 1 8. A copy is being transmitted to the International Bureau. 



This International Search Report consists of a total of . 



sheets. 



\T\ ' It is also accompanied by a copy of each prior art document cited in this report. 



Basis of the report 

a With regard to the language, the international search was carried out on the basis of the international application in the 
language in which it was filed, unless otherwise indicated under this item. 

(—| the international search was carried out on the basis of a translation of the international application furnished to this 
' — Authority (Rule 23.1 (b)). 

b With regard to any nuc.eotide and/or amino acid sequence disclosed in the international application, the international search 

was carried out on the basis of the sequence listing : 
| | contained in the international application in written form. 

filed together with the international application in computer readable form, 
furnished subsequently to this Authority in written form, 
furnished subsequently to this Authority in computer readble form. 

the statement that the subsequently furnished written sequence listing does not go beyond the disclosure in the 
international application as Hied has been furnished. 

the statement that the information recorded in computer readable form is identical to the written sequence listing has been 
furnished 



□ 
□ 
□ 
□ 

□ 



2 - (ZD Certain claims were found unsearchable (See Box I). 

3 - [Zl Unity of invention is lackin 9 (see Box ")■ 

4. With regard to the title, 

[X| the text is approved as submitted by the applicant. 

| [ the text has been established by this Authority to read as follows: 



With regard to the abstract, 

DTI the text is approved as submitted by the applicant. 

H the text has been established, according to Rule 38.2(b), by this Authority as it appears in Box ill. The ; appear* may, 
□ wimln one ^ month f?om tne date of mailing of this international search report, subm.t comments to th» Authority. 



The figure of the drawings to be published with the abstract is Figure No. 



m r I None of the figures, 

as suggested by the applicant. I — i 

| [ because the applicant failed to suggest a figure. 

| | because this figure better characterizes the invention. 
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Minimum documentation searched (classification system followed by classification symbols) 

IPC 6 H04N 



Documentation searched other than minimum 



documentation to the extent that such documents are included in the fields searched 



Electronic data base 



consulted during the international search (name of data base and, where practical, search terms used) 



C. DOCUMENTS CONSIDERED TO BE RELEVANT 



Category ° 



Citation of document, with indication, where appropriate, of the relevant passages 



Relevant to claim No. 



WO 97 46008 A (THOMSON CONSUMER 
ELECTRONICS) 4 December 1997 (1997-12-04) 

page 3, line 17 -page 11, line 12 

EP 0 696 141 A (NOKIA TECHNOLOGY GMBH) 
7 February 1996 (1996-02-07) 

column 5, line 3 -column 7, line 32 

EP 0 723 371 A (THOMSON MULTIMEDIA SA) 

24 July 1996 (1996-07-24) 

column 3, line 14 -column 5, line 51 

-/- 



1-5, 

10-12, 

22, 

25-29,35 



1,6-10, 

22,25, 

30-35 



1,13-16 



rn 



Further documents are listed in the continuation of box C 



Patent family members are listed in annex. 



° Special categories of cited documents : 

"A" document defining the general state of the art which is not 

considered to be of particular relevance 
"E" earlier document but published on or after the international 

filing date 

"L" document which may throw doubts on priority claim(s) or 
which is cited to establish the publication date of another 
citation or other special reason (as specified) 

"O" document referring to an oral disclosure, use, exhibition or 
other means 

"P" document published prior to the international filing date but 
later than the priority date claimed 



T" later document published after the international filing date 
or priority date and not in conflict with the application but 
cited to understand the principle or theory underlying the 
invention 

B X W document of particular relevance; the claimed invention 
cannot be considered novel or cannot be considered to 
involve 'an inventive step when the document is taken alone 

"Y" document of particular relevance; the claimed invention 

cannot be considered to involve an inventive step when the 
document is combined with one or more other such docu- 
ments, such combination being obvious to a person skilled 
in the art. 

document member of the same patent family 



Date of the actual completion of the international search 
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Date of mailing of the international search report 
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Name and mailing address of the ISA 
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ELECTRONICS) 2 November 1995 (1995-11-02) 
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page 4, line 23 -page 8, line 35 
figure 3 
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REVIEW- TECHNICAL, NR. 266, PAGE(S) 64 - 
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21 April 1999 (1999-04-21) 
paragraph '0031! - paragraph '0043! 

EP 0 893 913 A (CANAL PLUS SA) 
27 January 1999 (1999-01-27) 
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I Basis of the opinion . . 

Description, pages 



-I _ 2 9 as originally filed 

Claims, No.: 

^ 3 as originally filed 

Drawings, sheets: 

1/7-7/7 as originally filed 

2. The amendments have resulted in the cancellation of: 

□ the description, pages: 

□ the claims, Nos.: 

□ the drawings, sheets: 

3. Thisopinionhasbeenestab,^ 

considered to go beyond the disclosure as f.led (Rule 70.2(c)). 

4. Additional observations, if necessary: 



The anions whether the ctaimed motion appears to be noveUo *vo (ve aninve„«ve step (to be non-obvtous), 
™IZ %ZS» applicable have no, been and no. be exam,ned „ respect ot. 

□ the entire international application, 
H claims Nos. 41-43, 

because* 

□ the said international app.ication. or the said claims No, refcte to the following subiec, matter which does 
not require an international preliminary examination (spec/fy): 
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that no meaningful opinion could be formed (spec/fy). 

see separate sheet 

Q th9 o, said Cairns Nos. „ so inadequately supposed b y ft. d.s=np,ion .ha, no msan^u, op* to n 

could be formed. 

□ no international search report has been established for the said claims Nos. . 



V Reasoned statement under Ru. e 66.2(a)(ii) with regard SteP °' ' ,ndUStria ' 

applicability; citations and explanations supporting such statement 

1. Statement 

Novelty (N) Claims 1-6,8-20,22-30,32-40 

Inventive step (IS) Claims 7,21,31 

Industrial applicability (IA) Claims 



2. Citations and explanations 
see separate sheet 



VI. Certain documents cited 

1. Certain published documents (Rule 70.10) 
and / or 

2. Non-written disclosures (Rule 70.9) 
see separate sheet 



VII Certain defects in the international application 

The following defects in the form or contents of the international application have been noted: 
see separate sheet 
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VIII Certain observations on the international application 

The fo.lowing observations on the clarity ot the claims, description, and drawings or on the question whether the 
claims are fully supported by the description, are made: 



see separate sheet 
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Concerning p " ir>t - No Opinion 

See the section "Concerning Point VIII - clarity" below, section 1 



r.nncernina P™"t V - Reasoned Statement 



The following documents, cited in the International Search Report, are mentioned 
in this written opinion: 



D1 
D2 
D3 



WO 95 29560 A 
WO 97 46008 A 

■FUNCTIONAL MODEL OF A CONDITIONAL ACCESS SYSTEM' 21 
December 1995 (1995-12-21) , EBU REVIEW- TECHNICAL, NR. 266, 
PAGE(S) 64 - 77 XP000559450 



1 . The subject-matter of claim 1 does not meet the requirements of Article 33(2) and 
Rule 64(1-3) PCT since it lacks novelty. 

D1, see in particular pages 7-8, discloses: 

decoder for processing a transport packet stream comprising packetised data 
encapsulated within the packet payloads (Fig. 3), said decoder compr.s.ng: 



a 



means suitable for receiving an identifier of a particular security module system 
from a portable security module - Fig. 3, blocks 31, 30. 15. 17 & 21-24. see also 
page 7, lines 17-21; 

means for configuring the decoder in response to the rece.ved identif.er - F.g. 3, 
31,16, 17, 30; 

means for receiving filter data for filtering packetised data assoc.ated w.th said 
particular security module system from said portable security module (page 8); 

means for filtering said packetised data in response to said received filter data - 
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Fig. 3, 15,30. 



The subject-matter of the following claims does not meet the requirements of 
Article 33(2) and Rule 64(1-3) PCT since novelty is lacking in each case: 

claim 10 - see D1; 

claim 22 - see D1 , Fig. 3 - furthermore virtually any smart card for such a video 
system has "means for" such operations; 
claim 25 - see D1 and point 1. above; 
claim 35 - see D1; 

The following dependent claims do not appear to contain any additional features 
which, in combination with the features of any claim to which they refer, establish 
novelty or involve an inventive step: 

claim 2- seeD1; 
claim 3- seeD1; 

claim 4- see D1, page 5, lines 11- 15; 
claim 5- see D1, Fig. 3, blocks 13 & 19; 
claims 6 & 30 - see D1 , page 7, lines 33-35; 

claims 7 & 31 - it is well-known in all fields of commerce, and pay tv is no 

exception, that credits may be offered for services and products - 
see also D3, p. 73, top-left paragraph; 

claims 8 & 32 - see D1; 

claim 9- seeD1; 

claims 1 1 & 36 - see D1; 

claim 12 - it is implicit in D1 that where a plurality of codes are recognized, there 
are conceptually a "plurality" of filters, since for each item to recognized 
the memory storing the data and the comparator form a f.lter, see also 
D2; 

claims 13 & 33 -see D1; 
claims14,15&34 -seeD1; 

claim 16 - it is implicit that configurable filters "can" be configured to f.lter or not 
filter any arbitrary data; 
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claims 17 & 37 - see D1. see the various busses in Fig. 3; 

claims 18&38 -seeD1; 

claims 19 & 39 - see D1 , pages 7-8; 

claims 20 & 40- see D1; 

claim 21 - see D3, p. 72, top-left paragraph & p. 74 
claims 23,24- seeDV, 
claims 26-29- see D1. 



Concerning P"int VI - Ce rtain Documents 

Certain published documents (Rule 70.10) 



D4: 

Publication no. 
EP-A-0 910 217 



Publication date 
21.04.99 



Filing date 
05.10.98 



Priority date 
14.10.97 



D5: 

Publication no. 
EP-A-0 893 913 



Publication date 
27.01.99 



Filing date 
24.07.97 



Priority date 



D6: 

Publication no. 
EP-A-0 884 906 



Publication date 
16.12.98 



Filing date 
08.06.98 



Priority date 
10.06.97 



These documents, although not constituting prior art within the meaning of Rule 
64.1 (b) PCT, appear to disclose all of the features of the following claims 
respectively: 



D4- 1-4 

D5- 1,10,22,25,35 
D6- 1,10,22,25,35 

No check has been made as to whether the priorities of these prior applications 
have been validly claimed, where appropriate. 
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2. 



4. 



rnncerninq Point VII - Ce rtain Defects 

To meet the requirements of Rule 6.3(b) PCT the independent claims should be 
properly cast in the two part form, with those features which in combination are 
part of the prior art being placed in the preamble. 

The opening part of the description should be amended so that it is in agreement 
with any new claims (Rule 5.1(a)(iii)). 

in order to indicate more completely the background art, useful for understanding 
the invention, the documents mentioned above should be acknowledged in the 
description (Rule 5.1(a)(ii)) and technical problems and any advantageous effects 
should be stated in comparison to this background art (Rule 5.1(a)(m)). 

Reference signs should be introduced throughout the claims (Rule 6.2(b)). 



r-^ominq Point VIII - r.»rt*in Observations 

1 The subject-matter of claims 41-43 lacks clarity and therefore does not meet the 
requirements of Article 6 PCT. See also Rule 6.2(a) PCT. 

2. It should be noted that "means for" features are interpreted as being merely 
means suitable for - see PCT Guidelines III, 4.8 

3. Claims 1 2 and 1 3 lack clarity (Art. 6 PCT) since they depend on claim 9 which 
lacks an antecedent for first and second filters. 

4 Claim 17 lacks clarity (Art. 6 PCT) since it lacks an antecedent for "security 

module" which casts doubt on the claim and all the claims which are dependent 

on it. 
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(57) Abstract 



A decoder (12) is described for processing a transport packet stream. The packet stream comprises packetised data encapsulated 
within the packet pay loads. The decoder comprises: means (81) for receiving an identifier of a particular security module system from a 
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for filtering packetised data associated with said particular security module system from the portable security module; and means (80) for 
filtering said packetised data in response to said received filter data. 
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DECODER FOR, AND METHOD OF, PROCESSING A TRANSPORT 

PACKET STREAM 

The present invention relates to a decoder for, and a method of, processing a 
5 transport packet stream. The invention is particular suitable for a receiver/decoder 
for a digital transmission system, in particular for use in a digital television system. 

Conventional digital television broadcast systems transmit data in the form of discrete 
transport stream packets or transport packets, each packet being of a predetermined 
10 length and containing a header and a pay load. The MPEG standard is the currently 
favoured standard in this domain and sets out, amongst other things, a predetermined 
format for such packets. 

The packet header comprises general descriptive data regarding the packet, whilst the 
15 pay load comprises the data to be processed at the receiver/decoder. The packet 
header includes at least a packet ID or PID identifying the packet. The payload of 
the packet may contain audio, video or other data such as application data or, in 
particular, conditional access system data. 

20 Conventionally, the incoming data stream is filtered by a receiver/decoder according 
to the PID of each packet. Data requiring immediate processing such as audio or 
visual data is communicated to an appropriate processor in the form of what is 
conventionally known as a packetised elementary stream or PES. This continuous 
flux of data, which is formed by assembling the payloads of the transport packets, 

25 itself comprises a sequence of packets, each PES packet comprising a packet header 
and payload. 

Other data not requiring immediate processing may also be encapsulated within the 
payloads of the transport packets. Unlike PES data, which is treated immediately by 
30 a processor to generate a real time output, this sort of data is typically processed in 
an asynchronous manner by the receiver/decoder processor. In this case, data is 
formatted in a single table or a series of sections or tables, each including a header 
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and a pay load, the header of the section or table including a table ID or TID. 

In the case where the access to a transmission is to be restricted, for example, in a 
pay TV system, conditional access data may be included in a table or section 
5 broadcast in the transport stream with the transmission. This conditional access data 
is filtered by the decoder and passed to a portable security module, such as. 
smartcard, inserted in the decoder. The data is then processed by the smartcard in 
order to generate, for example, a control word subsequently used by the decoder to 
descramble a transmission. 

10 

One problem lies in the volume of data that will be received and processed by the 
decoder and notably the volume of conditional access data eventually forwarded to 
the security module. In particular, the processing capabilities of a security module 
processor and the capacity of the communication channel between the decoder and 
15 security module may be insufficient to handle a given volume of messages. This 
problem is exacerbated by the increasing tendency for programmes to be transmitted 
with multiple conditional access messages enabling access by different operators to 
the same programme (e.g. a football match or a thematic television channel). 

20 In a first aspect, the present invention provides a decoder for processing a transport 
packet stream comprising packetised data encapsulated within the packet payloads, 
said decoder comprising: 

means for receiving an identifier of a particular security module system from 
a portable security module; 
25 means for configuring the decoder in response to the received identifier; 

means for receiving filter data for filtering packetised data associated with said 
particular security module system from the portable security module; and 

means for filtering said packetised data in response to said received filter data. 



Different security modules may be associated with different respective security 
module systems, each security module storing therein an identifier of the particular 
system with which it is associated. When the security module is first connected with, 
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or inserted into, the decoder, the security module can communicate the stored 
identifier to the decoder. The configuring means can then configure the decoder in 
response to the received identifier in order to extract from the packetised data data 
associated with the particular security module system. This can provide a simple, 
5 cheap and efficient way of configuring the decoder for one of a number of different 
security module systems. 

As described above, the filtering means is configurable to filter the packetised data 
in response to filter data received from the security module. This can enable the 
10 filtering means to configured to filter from the extracted packet data only the packet 
data which is of interest to the security module. This can enable the flow of data to 
the security module to be greatly reduced to conform with the processing capabilities 
of the security module. 

15 In one preferred embodiment, the means for receiving the identifier of the security 
module system and configuring the decoder comprise an application stored in the 
decoder, and the means for receiving the filter data and filtering the packetised data 
comprise a filter. 

20 The filtering means may be configurable by said configuring means to extract from 
the packetised data data associated with the particular security module system for 
subsequent filtering in response to the received filter data. 

In one preferred embodiment, the identifier comprises an identifier of a particular 
25 conditional access system. The decoder can be configured to extract from the 
packetised data data associated only with the conditional access system used by the 
security module. This can provide simple customisation of the decoder for any one 
of a number of different conditional access systems used by respective service 
providers. Thus, the subscriber need not be limited by, for example, the supplier of 
30 the decoder to one conditional access system only. 



The filtering means may be adapted to extract from the packetised data transport 
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packets containing a program map table and a conditional access table. The 
configuring means may be adapted to receive the program map table and conditional 
access table from the filtering means and configure the filtering means in response to 
the received identifier and data contained in the program map table and the 
5 conditional access table. This can enable the filtering means to identify readily the 
packet ID of the data associated with the particular conditional access system. 

Preferably, the filtering means is configurable in response to filter data comprising 
at least a table identifier or section identifier for the extracted transport packet data. 
10 Filtering data at the table or section level in response to information from the security 
module enables a more precise identification and selection of data to be carried out, 
for example, to extract relevant conditional access messages addressed to the module. 
The filtering means may equally be configurable in accordance with other data 
received from the portable security module. 

15 

In another preferred embodiment, the identifier comprises an identifier of a particular 
debiting system used by the security module. Different security modules may utilise 
different debiting systems for, for example, pay-per-view or pay-per-file events. For 
example, the security module may store a wallet of electronic tokens, the number of 

20 tokens being decreased when such an event is purchased. Alternatively, the security 
module may include features of a credit card, which may require the decoder to read 
the credit card details and communicate with a bank in order to debit the subscriber's 
account by an appropriate amount upon purchase of such an event. By the passing 
of the identifier to the decoder by the security module, the security module can 

25 configure the decoder to perform the debiting operation in the manner supported by 
the security module. 

Alternatively, or additionally, the identifier may comprise an identifier of a particular 
crediting system used by the security module. Again, different security modules may 
30 utilise different crediting systems. For example, the wallet of electronic tokens stored 
in the security module may be increased, or the subscriber's bank account may be 
credited, by the program provider when the subscriber has viewed a promotional 
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event, such as a drinks advertisement. By the passing of the identifier to the decoder 
by the security module, the security module can configure the decoder to perform the 
crediting operation in the manner supported by the security module. 

5 In a preferred embodiment, the filtering means comprises first filtering means, for 
example a first set of filters, for extracting from the packetised data data associated, 
with said particular security module system and second filtering means, for example 
a second set of filters, for filtering the extracted data in response to said filter data. 

10 Thus, in a second aspect the present invention provides a decoder for processing a 

transport packet stream comprising packetised data encapsulated within the packet 

pay loads, said decoder comprising: 

first filtering means for extracting from the packetised data data associated 

with a particular security module system; and 
15 second filtering means for filtering the extracted data in response to filter data 

received from a portable security module. 

The first filtering means may be configurable in response to an identifier of said 
particular security module system received from said security module. 

20 

At least one of the filters of said second set of filters may be configurable in response 
to a data pattern included in said filter data. 

The at least one of the filters of said second set of filters may be configurable to filter 
25 from the packetised data data having a pattern matching said data pattern included in 
the filter data, or configurable to not filter from the packetised data data having a 
pattern matching said data pattern included in the filter data. 



30 



The at least one of the filters of said second set of filters may be configurable to 
ignore at least part of said data pattern in response to a data masking pattern included 
in said filter data. 
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In a preferred embodiment, the decoder comprises means, such as the filter, for 
forwarding to the security module conditional access data obtained in accordance with 
the filter data received from the security module. 

Whilst the present invention is particularly adapted to enable a reduction of the 
volume of conditional access messages communicated between the decoder and the . 
module, it will be nevertheless appreciated that the filtering means may be configured 
to extract data other than conditional access data and having a destination other than 
the security module. 

Conditional access data filtered and forwarded to the security module may comprise 
entitlement control messages (ECMs) and/or entitlement management messages 
(EMMs). 

Even within a group of messages associated with a single conditional access system 
there may be a large number of messages irrelevant to a particular user within that 
system. For example, within a single conditional access system a number of different 
groups of users may be defined leading to the generation of a number of EMMs, not 
all of which may be relevant to a given user. 

Preferably therefore, filter data provided by the security module comprises data used 
by the filter means to extract group and/or individual entitlement management 
messages addressed to the security module. 

In one embodiment, the decoder is adapted to receive a control word generated by the 
security module in response to the conditional access data forwarded thereto, the 
control word being used by the decoder to descramble a scrambled transmission. 

In order to preserve security, some or all communications between the security 
module and the decoder may be encrypted. In particular, the descrambling control 
word generated by the security module and eventually transmitted to the decoder may 
be encrypted. 
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Whilst the present invention may apply to any packet transmission system, the present 
invention is particularly applicable to a decoder adapted to receive an MPEG 
compatible data stream, for example, comprising table, section or other packetised 
data encapsulated within the packet pay loads. 

5 

In this regard, the term "table, section or other packetised data" refers in its broadest 
sense to any data table, alone or in a sequence, and comprising a header and pay load 
and that is itself encapsulated within a transport packet stream. As will be described 
in the preferred embodiment, the present invention is particularly applicable to 
10 filtering of data contained within an MPEG table, notably a single MPEG short form 
table. 



In the context of this application, the term MPEG refers to the data transmission 
standards developed by the International Standards Organisation working group 
15 "Motion Pictures Expert Group" and in particular but not exclusively the MPEG-2 
standard developed for digital television applications and set out in the documents ISO 
13818-1, ISO 13818-2, ISO 13818-3 and ISO 13818-4, In the context of the present 
patent application, the term MPEG includes all variants, modifications or 
developments of MPEG formats applicable to the field of digital data transmission. 

20 

The present invention also provides a portable security module for use with a decoder 
as aforementioned, said security module comprising memory means for storing an 
identifier of a particular security module system and means for communicating the 
identifier to the decoder to configure the decoder. 

25 

In one preferred embodiment, the portable security module comprises a smartcard. 
As used herein, the term "smartcard" includes, but not exclusively so, any chip-based 
card device, or object of similar function and performance, possessing, for example, 
microprocessor and/or memory storage. Included in this term are devices having 
30 alternative physical forms to a card, for example key-shaped devices such as are often 
used in TV receiver/decoder systems, credit cards, and devices where access to the 
information stored within the device is restricted. 
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The present invention also provides a method of processing a transport packet stream 
comprising packetised data encapsulated within the packet pay loads, said method 
comprising the steps at a decoder of: 

receiving an identifier of a particular security module system from a portable 
security module; 

configuring the decoder in response to the received identifier; 

receiving filter data for filtering packetised data associated with said particular 
security module system from the portable security module; and 

filtering said packetised data in response to said received filter data. 

The present invention also provides a method of processing a transport packet stream 
comprising packetised data encapsulated within the packet pay loads, said method 
comprising the steps at a decoder of: 

extracting from the packetised data data associated with a particular security 
module system; and 

filtering the extracted data in response to filter data received from a portable 
security module. 

The present invention also provides a decoder for a digital transmission system 
adapted to receive a transport packet stream containing table, section or other 
packetised data encapsulated within the packet payloads and characterised in that the 
decoder comprises a means for filtering the encapsulated data configurable in response 
to filter data received from a portable security module. In addition to a filtering at 
the table or section level, the decoder may further carry out a transport level filtering 
in order, for example, to extract only these packets comprising data associated with 
the particular conditional access system used by the security module. Preferably, 
therefore the decoder further comprises a means for filtering transport packet data 
configurable in response to data received from the security module. Advantageously, 
the means for filtering transport packet data may be configurable in response to data 
representing the identity of the conditional access system received from the security 
module. 
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Features described above relating to device aspects of the present invention can also 
be applied to method aspects, and vice versa. 

The term "decoder" or "receiver/decoder" used herein may connote a receiver for 
5 receiving either encoded or non-encoded signals, for example, television and/or radio 
signals, which may be broadcast or transmitted by some other means. Embodiments 
of such receiver/decoders may include a decoder integral with the receiver for 
decoding the received signals, for example, in a "set-top box", a decoder functioning 
in combination with a physically separate receiver, as well as a decoder including 
10 additional functions, such as a web browser or integrated with a video recorder or a 
television. 

As used herein, the term "digital transmission system 1 ' includes any transmission 
system for transmitting or broadcasting digital data, for example primarily audiovisual 
15 or multimedia digital data. Whilst the present invention is particularly applicable to 
a broadcast digital television system, the invention may also be applicable to a fixed 
telecommunications network for multimedia internet applications, to a closed circuit 
television, and so on. 

20 As used herein, the term "digital television system" includes for example any 
satellite, terrestrial, cable and other system. 

There will now be described, by way of example only, a preferred embodiment of the 
invention, with reference to the following figures, in which: 

25 

Figure 1 shows the overall architecture of a digital TV system according to this 
embodiment; 

Figure 2 shows the architecture of the conditional access system of Figure 1 ; 

30 

Figure 3 shows the hierarchy of MPEG-2 packets, in particular those associated with 
conditional access messages; 
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Figure 4 shows the structure of long form and short form MPEG-2 private sections; 

Figure 5 shows the elements of a receiver/decoder for use in this embodiment; 

5 Figure 6 shows the elements of the receiver/decoder used to process the transport 
stream, in particular in relation to conditional access messages; and 

Figure 7 shows the structure of the PID and section filters of the filter unit of Fig. 
6. 

10 

An overview of a digital television broadcast and reception system 1 is shown in 
Figure 1. The invention includes a mostly conventional digital television system 2 
which uses the MPEG-2 compression system to transmit compressed digital signals. 
In more detail, MPEG-2 compressor 3 in a broadcast centre receives a digital signal 
15 stream (for example a stream of audio or video signals). The compressor 3 is 
connected to a multiplexer and scrambler 4 by linkage 5. The multiplexer 4 receives 
a plurality of further input signals, assembles one or more transport streams and 
transmits compressed digital signals to a transmitter 6 of the broadcast centre via 
linkage 7, which can of course take a wide variety of forms including telecom links. 

20 

The transmitter 6 transmits electromagnetic signals via uplink 8 towards a satellite 
transponder 9, where they are electronically processed and broadcast via a notional 
downlink 10 to earth receiver 11, conventionally in the form of a dish owned or 
rented by the end user. The signals received by receiver 11 are transmitted to an 
25 integrated receiver/decoder 12 owned or rented by the end user and connected to the 
end user's television set 13. The receiver/decoder 12 decodes the compressed 
MPEG-2 signal into a television signal for the television set 13. 

A conditional access system 20 is connected to the multiplexer 4 and the 
30 receiver/decoder 12, and is located partly in the broadcast centre and partly in the 
receiver/decoder. It enables the end user to access digital television broadcasts from 
one or more broadcast suppliers. A smartcard, capable of decrypting messages 
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relating to commercial offers (that is, one or several television programmes sold by 
the broadcast supplier), can be inserted into the receiver/decoder 12. Using the 
receiver/decoder 12 and smartcard, the end user may purchase events in either a 
subscription mode or a pay-per-view mode. 

5 

An interactive system 17, also connected to the multiplexer 4 and the. 
receiver/decoder 12 and again located partly in the broadcast centre and partly in the 
receiver/decoder, may be provided to enable the end user to interact with various 
applications via a modemmed back channel 16. 

10 

The conditional access system 20 will now be described in more detail. 

With reference to Figure 2, in overview the conditional access system 20 includes a 
Subscriber Authorization System (SAS) 21. The SAS 21 is connected to one or more 
15 Subscriber Management Systems (SMS) 22, one SMS for each broadcast supplier, by 
a respective TCP-IP linkage 23 (although other types of linkage could alternatively 
be used). Alternatively, one SMS could be shared between two broadcast suppliers, 
or one supplier could use two SMSs, and so on. 

20 First encrypting units in the form of ciphering units 24 utilising "mother" smartcards 
25 are connected to the SAS by linkage 26. Second encrypting units again in the 
form of ciphering units 27 utilising mother smartcards 28 are connected to the 
multiplexer 4 by linkage 29. The receiver/decoder 12 receives a "daughter" 
smartcard 30. It is connected directly to the SAS 21 by Communications Servers 31 

25 via the modemmed back channel 16. The SAS sends, amongst other things, 
subscription rights to the daughter smartcard on request. 

The smartcards contain the secrets of one or more commercial operators. The 
"mother" smartcard encrypts different kinds of messages and the "daughter" 
30 smartcards decrypt the messages, if they have the rights to do so. 

The first and second ciphering units 24 and 27 comprise a rack, an electronic VME 
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card with software stored on an EEPROM, up to 20 electronic cards and one 
smartcard 25 and 28 respectively, for each electronic card, one card 28 for encrypting 
the ECMs and one card 25 for encrypting the EMMs. 

5 The operation of the conditional access system 20 of the digital television system will 
now be described in more detail with reference to the various components of the 
television system 2 and the conditional access system 20. 

Multiplexer and Scrambler 

10 

With reference to Figures 1 and 2, in the broadcast centre, the digital audio or video 
signal is first compressed (or bit rate reduced), using the MPEG-2 compressor 3. 
This compressed signal is then transmitted to the multiplexer and scrambler 4 via the 
linkage 5 in order to be multiplexed with other data, such as other compressed data. 

15 

The scrambler generates a control word used in the scrambling process and included 
in the MPEG-2 stream in the multiplexer. The control word is generated internally 
and enables the end user's integrated receiver/decoder 12 to descramble the 
programme. 

20 

Access criteria, indicating how the programme is commercialised, are also added to 
the MPEG-2 stream. The programme may be commercialised in either one of a 
number of "subscription" modes and/or one of a number of "Pay Per View" (PPV) 
modes or events. In the subscription mode, the end user subscribes to one or more 
25 commercial offers, or "bouquets", thus getting the rights to watch every channel 
inside those bouquets. In the preferred embodiment, up to 960 commercial offers 
may be selected from a bouquet of channels. 

In the Pay Per View mode, the end user is provided with the capability to purchase 
30 events as he wishes. This can be achieved by either pre-booking the event in advance 
("pre-book mode"), or by purchasing the event as soon as it is broadcast ("impulse 
mode"). In the preferred embodiment, all users are subscribers, whether or not they 
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watch in subscription or PPV mode, but of course PPV viewers need not necessarily 
be subscribers. 

Entitlement Control Messages 

Both the control word and the access criteria are used to build an Entitlement Control 
Message (ECM). This is a message sent in relation with a scrambled program; the 
message contains a control word (which allows for the descrambling of the program) 
and the access criteria of the broadcast program. The access criteria and control 
word are transmitted to the second encrypting unit 27 via the linkage 29. In this unit, 
an ECM is generated, encrypted and transmitted on to the multiplexer and scrambler 
4. During a broadcast transmission, the control word typically changes every few 
seconds, and so ECMs are also periodically transmitted to enable the changing control 
word to be descrambled. For redundancy purposes, each ECM typically includes two 
control words; the present control word and the next control word. 

Each service broadcast by a broadcast supplier in a data stream comprises a number 
of distinct components; for example a television programme includes a video 
component, an audio component, a sub-title component and so on. Each of these 
components of a service is individually scrambled and encrypted for subsequent 
broadcast to the transponder 9. In respect of each scrambled component of the 
service, a separate ECM is required. Alternatively, a single ECM may be required 
for all of the scrambled components of a service. Multiple ECMs are also generated 
in the case where multiple conditional access systems control access to the same 
transmitted program. 

Programme Transmission 

The multiplexer 4 receives electrical signals comprising encrypted EMMs from the 
SAS 21, encrypted ECMs from the second encrypting unit 27 and compressed 
programmes from the compressor 3 . The multiplexer 4 scrambles the programmes 
and sends the scrambled programmes, the encrypted EMMs and the encrypted ECMs 
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to a transmitter 6 of the broadcast centre via the linkage 7. The transmitter 6 
transmits electromagnetic signals towards the satellite transponder 9 via uplink 8. 

Programme Reception 

5 

The satellite transponder 9 receives and processes the electromagnetic signals . 
transmitted by the transmitter 6 and transmits the signals on to the earth receiver 11, 
conventionally in the form of a dish owned or rented by the end user, via downlink 
10. The signals received by receiver 11 are transmitted to the integrated 
10 receiver/decoder 12 owned or rented by the end user and connected to the end user's 
television set 13. The receiver/decoder 12 demultiplexes the signals to obtain 
scrambled programmes with encrypted EMMs and encrypted ECMs. 

If the programme is not scrambled, that is, no ECM has been transmitted with the 
15 MPEG-2 stream, the receiver/decoder 12 decompresses the data and transforms the 
signal into a video signal for transmission to television set 13. 

If the programme is scrambled, the receiver/decoder 12 extracts the corresponding 
ECM from the MPEG-2 stream and passes the ECM to the "daughter" smartcard 30 

20 of the end user. This slots into a housing in the receiver/ decoder 12. The daughter 
smartcard 30 controls whether the end user has the right to decrypt the ECM and to 
access the programme. If not, a negative status is passed to the receiver/decoder 12 
to indicate that the programme cannot be descrambled. If the end user does have the 
rights, the ECM is decrypted and the control word extracted. The receiver/decoder 

25 12 can then descramble the programme using this control word. The MPEG-2 stream 
is decompressed and translated into a video signal for onward transmission to 
television set 13. 

Entitlement Management Messages (EMMs) 

30 



The EMM is a message dedicated to an individual end user (subscriber), or a group 
of end users. Each group may contain a given number of end users. This 
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organisation as a group aims at optimising the bandwidth; that is, access to one group 
can permit the reaching of a great number of end users. 

Various specific types of EMM can be used. Individual EMMs are dedicated to 
5 individual subscribers, and are typically used in the provision of Pay Per View 
services; these contain the group identifier and the position of the subscriber in that 
group. 

Group subscription EMMs are dedicated to groups of, say, 256 individual users, and 
10 are typically used in the administration of some subscription services. This EMM 
has a group identifier and a subscribers' group bitmap. 

Audience EMMs are dedicated to entire audiences, and might for example be used 
by a particular operator to provide certain free services. An "audience" is the totality 
15 of subscribers having smartcards which bear the same conditional access system 
identifier (CA ID). Finally, a "unique" EMM is addressed to the unique identifier 
of the smartcard. 

Subscriber Management Svstem (SMS) 

20 

A Subscriber Management System (SMS) 22 includes a database 32 which manages, 
amongst others, all of the end user files, commercial offers, subscriptions, PPV 
details, and data regarding end user consumption and authorization. The SMS may 
be physically remote from the SAS. 

25 

Each SMS 22 transmits messages to the SAS 21 via respective linkage 23 which 
imply modifications to or creations of Entitlement Management Messages (EMMs) 
to be transmitted to end users. 



30 



The SMS 22 also transmits messages to the SAS 21 which imply no modifications or 
creations of EMMs but imply only a change in an end user's state (relating to the 
authorization granted to the end user when ordering products or to the amount that 
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the end user will be charged). 

The SAS 21 sends messages (typically requesting information such as call-back 
information or billing information) to the SMS 22, so that it will be apparent that 
5 communication between the two is two-way. 

Subscriber Authorization System (SAS) 

The messages generated by the SMS 22 are passed via linkage 23 to the Subscriber 
10 Authorization System (SAS) 21, which in turn generates messages acknowledging 
receipt of the messages generated by the SMS 21 and passes these acknowledgements 
to the SMS 22. 

In overview the SAS comprises a Subscription Chain area to give rights for 
15 subscription mode and to renew the rights automatically each month, a Pay Per View 
Chain area to give rights for PPV events, and an EMM Injector for passing EMMs 
created by the Subscription and PPV chain areas to the multiplexer and scrambler 4, 
and hence to feed the MPEG stream with EMMs. If other rights are to be granted, 
such as Pay Per File (PPF) rights in the case of downloading computer software to 
20 a user's Personal Computer, other similar areas are also provided. 

One function of the SAS 21 is to manage the access rights to television programmes, 
available as commercial offers in subscription mode or sold as PPV events according 
to different modes of commercialisation (pre-book mode, impulse mode). The SAS 
25 21, according to those rights and to information received from the SMS 22, generates 
EMMs for the subscriber. 

The EMMs are passed to the Ciphering Unit (CU) 24 for ciphering with respect to 
the management and exploitation keys. The CU completes the signature on the EMM 
30 and passes the EMM back to a Message Generator (MG) in the SAS 21, where a 
header is added. The EMMs are passed to a Message Emitter (ME) as complete 
EMMs. The Message Generator determines the broadcast start and stop time and the 




WO 99/65231 



WO 99/65231 



PCT/IB99/01164 



-17- 

rate of emission of the EMMs, and passes these as appropriate directions along with 
the EMMs to the Message Emitter. The MG only generates a given EMM once; it 
is the ME which performs cyclic transmission of the EMMs. 

5 On generation of an EMM, the MG assigns a unique identifier to the EMM. When 
the MG passes the EMM to the ME, it also passes the EMM ID. This enables . 
identification of a particular EMM at both the MG and the ME. 

In systems such as simulcrypt which are adapted to handle multiple conditional access 
10 systems e.g. associated with multiple operators, EMM streams associated with each 
conditional access system are generated separately and multiplexed together by the 
multiplexer 4 prior to transmission. 

Conditional Access Messages in the Transport Stream 

15 

The different nature of ECM and EMM messages leads to differences vis a vis the 
mode of transmission of the messages in the MPEG transport stream. ECM 
messages, which carry the control words needed to descramble a programme are 
necessarily linked to the video and audio streams of the programme being transmitted. 
20 In contrast EMM messages are general messages broadcast asynchronously to transmit 
rights information to individual or groups of customers. This difference is reflected 
in the placing of ECM and EMM messages within the MPEG transport stream. 

As is known, MPEG transport packets are of a fixed length of 188 bytes including 
25 a header. In a standard packet, the three bytes of the header following the 
synchronisation data comprise: 



TABLE I Transport error indicator 1 bit 

Payload unit indicator 1 bit 

30 Transport priority 1 bit 

PID 13 bits 

Transport scrambling control 2 bits 
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Adaptation field control 2 bits 

Continuity counter 4 bits 

The characteristics of these fields are largely determined by the MPEG standard. 

5 

Referring to Figure 3, the organisation of data within a transport stream will be 
described. As shown, the transport stream contains a programme association table 
40 ("PAT"), the PID in the header of the packet being fixed by the MPEG-2 standard 
at a value of 0x00. The programme access table 40 provides the entry point for 
10 access to programme data and contains a table referring to the PID values of the 
programme map tables ("PMT") 41, 42 associated with a number of programmes. 
Each programme map table 41, 42 contains in turn a reference to the PID values of 
the packet streams of the audio tables 43 and video tables 44 of that programme. 

15 As shown, the programme map table 42 also contains references to the PID values 
of other packets 45, 46 containing additional data relating to the programme in 
question. In the present case ECM data generated by a number of conditional access 
systems and associated with the programme in question is contained within the 
referred packets 45, 46. 

20 

In addition to the programme access table PAT 40, the MPEG transport stream 
further comprises a conditional access table 47 ("CAT"), the PID value of which is 
fixed at 0x01. Any packet headers containing this PID value are thus automatically 
identified as containing access control information. The CAT table 47 refers to the 
25 PID values of MPEG packets 48, 49, 50 associated with EMM data associated with 
one or more conditional access systems. As with the PMT packets, the PID values 
of the EMM packets referred to in the CAT table are not fixed and may be 
determined at the choice of the system operator. 

30 Private Section Data 



In conformity with the MPEG-2 standard, information contained with a packet 
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payload is subject to a further level of structure according to the type of data being 
transported. In the case of audio, visual, teletext, subtitle or other such rapidly 
evolving and synchronised data, the information is assembled in the form of what is 
known as a packetised elementary stream or PES. This data stream, which is formed 
5 by assembling the pay loads of the transmitted packets, itself comprises a sequence of 
packets, each packet comprising a packet header and pay load. Unlike the transmitted 
packets in the transport stream, the length of PES packets is variable. 

In the case of other data, such as application data or, in this example, ECM and 
10 EMM data, a different format from PES packeting is proscribed. In particular, data 
contained in the transport packet payload is divided into a series of sections or tables, 
the table or section header including a table ID or TID identifying the table in 
question. Depending on the size of the data, a section may be contained entirely 
within a packet payload or may be extended in a series of tables over a number of 
15 transport packets. In the MPEG-2 context, the term "table" is often used to refer to 
a single table of data, whilst "section" refers to one of a plurality of tables with the 
same TID value. 



As with transport packet data and PES packet data, the data structure of a table or 
20 section is additionally defined by the MPEG-2 standard. In particular, two possible 
syntax forms for private table or section data are proposed; a long form or a short 
form, as illustrated in Figure 4. 



In both the short and long form, the header includes at least the data 60 comprising: 

25 

TABLE II Table id 8 bits 

Section syntax indicator 1 bit 

Private indicator/reserved 1 bit 

ISO reserved 2 bits 

30 Section length 12 bits 



The private indicator and private section lengths are comprised of data not fixed by 
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the MPEG-2 standard and which may be used by the system operator for his own 
purposes. 

In the case of short form, the header 60 is immediately followed by the payload data 
5 61. In the case of the long form, a further header section 62 is provided before the 
payload 63 and the message equally includes a CRC check value 64. The long form, 
which is typically used when a message is so long that it must be divided into a 
number of sections, contains the information necessary to assemble the sections, such 
as the section number, the number of the last section in the sequence of sections etc. 

10 

For further information regarding the long and short form table data, the reader is 
directed to the MPEG-2 standard. 



In the case of conditional access ECM and EMM messages, the data may usually be 
15 accommodated in a single table and the short form will be the appropriate format. 
A specific syntax for such short form conditional access messages is proposed in the 
context of the present invention, namely: 



TABLE III Table id (filter data) 8 bits (1 byte) 

20 Section syntax indicator 1 bit 

Private indicator/reserved 1 bit 

ISO reserved 2 bits 

Section length 12 bits 

CA specific header field (filter data) 56 bits (7 bytes) 



25 



30 



For such CA messages, the table id value may be set by the system operator at, for 
example, 0x80 and 0x81 for ECM messages (for example, odd and even messages) 
and 0x82 to 0x8F for EMM messages. These values are not MPEG-2 proscribed and 
may be chosen at the discretion of the system operator. 

Equally, in the case of the CA specific header field, hereby designated as the first 7 
bytes of the payload following the header, the parameters may be set by the system 
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operator to reflect, for example, the fact that the CA message is an EMM message 
carrying individual, group or audience subscription information. In this manner the 
"header" of such a table or section is extended. 

The , ad vantages of such message syntax will become clear later, with regard to the 
processing and filtering of messages by the receiver/decoder, notably by using the. 
Table id and CA specific field data. 

Receiver/ decoder 

Referring to Figure 5, the elements of a receiver/decoder 12 or set-top box for use 
in a digital broadcast system and adapted to be used in the present invention will now 
be described. As will be understood, the basic elements of this receiver/decoder are 
largely conventional and their implementation will be within the capabilities of one 
skilled in the art. 

As shown, the receiver/decoder 12 is equipped with several interfaces for receiving 
and transmitting data, in particular a tuner 70 for receiving broadcast MPEG 
transmissions, a serial interface 71, a parallel interface 72, and a modem 73 for 
sending and receiving data via the telephone network. The receiver/decoder also 
includes a first and second smartcard reader 74 and 75, the first reader 74 for 
accepting the subscription smartcard and the second reader 75 for accepting bank 
and/or other smartcards. 

The receiver/decoder also includes a receiver 76 for receiving infra-red control 
signals from a handset remote control 77 and a Peritel output for sending audiovisual 
signals to a television 13 connected to the receiver/ decoder. 

Processing of digital signals received via the interfaces and generation of output 
signals is handled by an ensemble of hardware and software elements here grouped 
together as a central control unit 78. The software architecture of the control unit 
within the receiver/decoder may correspond to that used in a known receiver/decoder 
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and will not be described here in any detail. It may be based, for example, on a 
virtual machine interacting via an interface layer with a lower level operating system 
implemented in the hardware components of the receiver/decoder. In terms of 
hardware architecture, the control unit 78 will be equipped with a processor, memory 
5 elements such as ROM, RAM, FLASH memory etc. as in known receiver/decoders. 

Applications processed by the control unit 78 may be resident applications stored in 
the ROM or FLASH of the receiver/decoder or applications broadcast and 
downloaded via the MPEG interface 2 of the receiver/decoder. Applications can 

10 include program guide applications, games, interactive services, teleshopping 
applications, as well as initiating applications to enable the receiver/decoder to be 
immediately operational upon start-up and applications for configuring aspects of the 
receiver/decoder. Applications are stored in memory locations in the 
receiver/decoder and represented as resource files comprising graphic object 

15 descriptions files, unit files, variables block files, instruction sequence files, 
applications files, data files etc. 

Filtering of Conditional Access Data 

20 Figure 6 shows in schematic form the elements necessary for processing packet and 
table data in accordance with this embodiment of the invention. As will be 
understood, the elements shown in this figure may be implemented in hardware, 
software or in combination of the two. 

25 The broadcast transmission received from the satellite receiver are passed via the 
conventional tuner 70 and an associated demodulator unit 79. The tuner 70 typically 
scans a range of frequencies, stopping when a chosen carrier frequency is detected 
within that range. The signals are then treated by the demodulator unit 79 which 
extracts and forwards the transport packet stream to a demux and filter unit 80. The 

30 filter structure of the demux and filter unit 80 will be described in detail below in 
relation to Figure 7. As will be understood, the actual choice of components needed 
to implement such a unit is at the discretion of the manufacturer and the most 
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important aspect of such a unit is the chosen filter configuration. 

In the case of data encrypted in accordance with a conditional access system as per 
the present embodiment, the filter unit interacts with a smartcard 30 (or any other 
5 secure device) inserted in the receiver/decoder 12 and a channel parameter application 
81, typically implemented as a software application in the receiver/decoder. 

The filter unit 80 extracts from the transport packet stream the PMT and CAT tables 
present in the stream. Referring back to Figure 3, this filtering operation is carried 
10 out at a PID level, the CAT table being identified by the PID value 0x01 and the 
appropriate PMT table corresponding to the chosen broadcast channel being extracted 
via the PAT table (PID value: 0x00) and the PID value of the chosen channel 
identified in the PAT table. 

15 The channel parameter application 81 additionally receives from the smartcard 30 an 
identification of the conditional access system associated with that smartcard. Again, 
referring back to Figure 3, a first conditional access system is associated with ECM 
and EMM data in the packets 45 and 48, respectively. Using the conditional access 
system ID received from the smartcard 30 and the PMT and CAT tables received 

20 from the filter unit 80, the application 81 determines the PID values of the conditional 
access packets associated with the conditional access system in question and returns 
these values to the filter unit 80. 

In the case of a simplified system, where a relatively small number of ECM and 
25 EMMs are emitted, no other filtering may be necessary and these PID values may be 
used by the filter unit 80 to extract all relevant ECM and EMM private sections from 
the identified packets and to thereafter forward the data contained within these 
sections to the smartcard 30. 

30 This conditional access data is then processed by the microprocessor within the 
smartcard 30 and the control word associated with the transmission passed to a 
descrambling unit 83. The descrambling unit 83 receives scrambled audiovisual or 
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other data information extracted from the transport packet stream by the demux and 
filter unit 80, descrambles the information using the control word and thereafter 
passes the data to a convention MPEG-2 chip which prepares the data for subsequent 
display on the associated television display. 

5 

However, whilst a PID level filter enables an extraction of those ECM and EMM . 
messages associated exclusively with the conditional access system in question, there 
may nevertheless be a large proportion of messages irrelevant to the user. These 
messages may include group EMM messages for other user groups, individual EMM 
10 messages for other users etc. The throughput of conditional access messages passed 
to the smartcard may therefore be very high. Given the limitations of the processor 
power and memory of smartcards, this throughput may be in practice more than the 
card can handle. 

15 In order to overcome this problem, the smartcard 30 is adapted to pass further filter 
data to the unit 80 for use in a section or table level filter process. 

Referring to the Table III above, tables containing conditional access data include 
Table id and CA specific header fields which are chosen to identify, for example, the 

20 presence of an EMM or ECM (table id values 0x80 or 0x81 and 0x82 to 0x8F, 
respectively) and the type of message (CA specific data identifying the group 
concerned by a group EMM message, the presence of an audience EMM message 
etc.). Depending on the data that it requires, the smartcard 30 will send the 
necessary table id and CA specific data to configure the filter unit to extract and 

25 return only those conditional access messages of interest to the smartcard. In this 
way, the flow of data sent to the smartcard may be reduced to conform with the 
processing capabilities of the smartcard microprocessor. 

Referring to Figure 7, the details of the filtering unit 80 will be described. Typically, 
30 the unit may be implemented as a hardware resource, driven by a firmware managing 
application with the receiver/decoder. As shown, a first set of filters 85 carries out 
a PID filtering process using the CA PID information received from the channel 
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parameter application. The PID filters 85 may equally be configured to extract other 
relevant packets such as the PMT, CAT tables sent to the channel parameter 
application. Other PID filters (not shown) may be used to extract the audiovisual 
PES packet information eventually sent to the descrambler etc. 

5 

Once stripped of the packet header, the private section or table data is then routed to 
a set of prefilters 86 adapted to filter the 8 bytes in the extended header of a table. 
As shown in Table III, 1 byte of the extended header is associated with the table id, 
7 bytes with the CA specific information. The filtering operation is carried out by 

10 comparison of the 8 byte pattern in a table with the filter data received from the 
smartcard. Some bits within the 8 byte, 64 bit pattern may be masked or ignored in 
the evaluation. In this embodiment, 32 different patterns are proposed, a subset of 
these patterns being applied by the prefilters in dependence of the information 
received from the smartcard. If one pattern matches, the section is sent to the FIFO 

15 buffer element 87. If no pattern matches, the section is ignored. The filters 86 
equally act to extract from the appropriate sections the PMT and CAT table 
information, which is passed to a FIFO buffer 88. 

Due to the characteristics of the transport layer, the arrival of sections is bursty. The 
20 buffer capacity of the buffers 87, 88 must be sufficient to handle an average rate of 
5Mbits/s, with the insertion of packets being based on a regular allocation with a 
possible deviation of ± 25%. 

In order to better understand the invention, a proposed example of operating 
25 instructions handled by the section filters 86 will now be outlined. 

Filter jill_sections (Filter Jd, Target, Mask, Trigger ^conditions, p/n) 

This command retrieves every section matching the target except masked bits after 

trigger_conditions occurred. 

30 

Filter ■ jiext ^section (Filter Jd, Target, Mask, Trigger ^conditions, p/n) 

This command retrieves the next section matching the target except masked bits after 
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trigger_conditions occurred. Trigger_conditions are related to other filters previously 
identified as matching. 

Filter Jd is an index between 0 and 31, pointing to a filter and an output queue. In 
5 addition, it gives the queuing priority, 0 being the highest priority. 
Target is an 8 bytes pattern. 

Mask is an 8 bytes pattern showing the bits to be masked in the target, value 0 means 
masked. 

Trigger ^conditions is a 32 bits bitmap, ORing filtered triggering that filter. Bit set 
10 at 0 means no trigger condition. Self trigger condition is ignored. 

p/n is a value, normally set to 1, positive for normal operation as described above. 
When set to 0 it means negative filtering, i.e., retrieve sections not matching target. 

Examples of use: 

15 

Example 1: 

Filter_all_sections(5, 0x8C7C453AA8BBFF00, 0XFF5 5 7FFFEEFFFF00 , 0, 1) 
will capture all EMMs corresponding to matching criteria. 

20 Example 2: 

Filter_next_section(0, 0x8000000000000000, OxFFOOOOOOOOOOOOOO, 0, 1) 
Filter_next_section(l, 0x8100000000000000, OxFFOOOOOOOOOOOOOO, 5, 1) 
Filter_next_section(2, 0x8000000000000000, OxFFOOOOOOOOOOOOOO, 3, 1) 
will start an ECM capture process with odd/even toggle. 

25 

Example 3: 

Filter_next_section(8, 0xPMT_TID0000Version_number00000000, 
OxFFOOOOlFOOOOOOOO, 0, 0) 

Filter_next_section(l, 0x8100000000000000, OxFFOOOOOOOOOOOOOO, 0x14, 1) 
30 Filter_next_section(2, 0x8000000000000000, OxFFOOOOOOOOOOOOOO, 0x12, 1) 

will start an ECM capture process with odd/even toggle, starting when there is a 
change in the PMT. 
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In terms of communication of CA messages and filter data to and from the smartcard 
82 and filter unit 80, a standard protocol such as IS07816 may be used. Since not 
all of the data in the filtered private section is required by the smartcard 82, the 
section may be modified and a message of the following format sent to the smartcard: 

5 

Table id 8 bits 

Zero 11 bits 

Filter id 5 bits 

CA specific header field 56 bits 
10 CA message N*8 bits 



The meaning of each of these terms will be clear from the above description. In 
terms of the filter data sent from the smartcard 82 to the filter 80, the following 
format may be used: 



Number of filters 


8 bits 


Filtering instruction 


5 bits 


Filter id 


5 bits 


Target 


64 bits 


Mask 


64 bits 


Trigger conditions 


5 bits 


p/n 


1 bit 



Number _of Jilt ers describes the number of filters to be set in this instruction. 
25 Filtering ^instruction is describing the type of instruction (filter next section, filter all 
sections). 

Filter Jd is an index pointing to a filter and an output queue. In addition, it gives the 
queuing priority, 0 being the highest priority. 
Target is the target pattern. 
30 Mask is a pattern showing the bits to be masked in the target, value 0 means masked. 
Trigger ^conditions is a bitmap, ORing filter_id triggering that filter. Bit set at 0 
means no trigger condition. Self trigger condition is ignored. 
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p/n is a value, normally set to 1, positive for normal operation as described above. 
When set to 0 it means negative filtering, i.e., retrieve sections not matching target. 

In practice, communications between the smartcard and the receiver/decoder may be 
5 subject to a level of encryption or scrambling for security reasons. In particular, 
communications between the smartcard 82 and filter unit 80, as well as the control 
word stream sent to the descrambler unit 83 may be encoded in this way. Encryption 
algorithms suitable for this purpose are widely known (RSA, DES etc.). 

10 Whilst the above embodiment has described configuration of the receiver/decoder 12 
in response to an identification of the conditional access system associated with the 
smartcard 30, the present invention is not limited to configuration of the 
receiver/decoder in relation to this one security module system. The decoder may be 
configurable in response to any one of a number of different security module systems. 

15 

For example, the smartcard 30 may use a debiting system in which a "wallet" of 
electronic tokens stored in the smartcard is debited a certain amount when the 
subscriber purchases a PPV event. Alternatively, the smartcard 30 may use a 
debiting system similar to that used in a credit card, in which the receiver/decoder 
20 reads banking information stored in the smartcard and contacts a bank via the 
modemmed back channel 16 in order to debit the subscriber's bank account. By 
passing an identifier of the debiting system to an application, such as, or similar to, 
the channel parameter application 81, the application can configure the decoder to 
perform the debiting operation in the manner supported by the smartcard. 

25 

In another example, the smartcard 30 may use a crediting system in which the wallet 
of electronic tokens stored in the smartcard is credited a certain amount when the 
subscriber has viewed, for example, a particular promotional event. Alternatively, 
the smartcard 30 may use a crediting system similar to that used in a credit card, in 
30 which the receiver/decoder reads banking information stored in the smartcard and 
contacts a bank via the modemmed back channel 16 in order to credit the subscriber's 
bank account. By passing an identifier of the crediting system to an application, such 
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as, or similar to, the channel parameter application 81, the application can configure 
the decoder to perform the crediting operation in the manner supported by the 
smartcard. 
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CLAIMS 

1 . A decoder for processing a transport packet stream comprising packetised data 
5 encapsulated within the packet pay loads, said decoder comprising: 

means for receiving an identifier of a particular security module system from 
a portable security module; 

means for configuring the decoder in response to the received identifier; 
means for receiving filter data for filtering packetised data associated with said 
10 particular security module system from the portable security module; and 

means for filtering said packetised data in response to said received filter data. 

2. A decoder according to Claim 1, wherein the filtering means is configurable 
by said configuring means to extract from the packetised data data associated with 

15 said particular security module system for subsequent filtering in response to said 
received filter data. 

3. A decoder according to Claim 1 or 2, wherein said identifier comprises an 
identifier of a particular conditional access system. 

20 

4. A decoder according to Claim 3, wherein the filtering means is adapted to 
extract from the packetised data transport packets containing a program map table and 
a conditional access table. 

25 5. A decoder according to Claim 4, wherein the configuring means is adapted to 
receive the program map table and conditional access table from the filtering means 
and configure the filtering means in response to the received identifier and data 
contained in the program map table and the conditional access table. 

30 6. A decoder according to any preceding claim, wherein said identifier comprises 
an identifier of a particular debiting system used by the security module. 
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7. A decoder according to any preceding claim, wherein said identifier comprises 
an identifier of a particular crediting system used by the security module. 

8. A decoder according to any preceding claim, wherein the filtering means is 
5 configurable in response to filter data comprising at least a table identifier or a section 

identifier for the packetised data. 

9. A decoder according to any preceding claim, wherein the filtering means 
comprises first filtering means for extracting from the packetised data data associated 

10 with said particular security module system and second filtering means for filtering 
the extracted data in response to said filter data. 

10. A decoder for processing a transport packet stream comprising packetised data 
encapsulated within the packet pay loads, said decoder comprising: 

15 first filtering means for extracting from the packetised data data associated 

with a particular security module system; and 

second filtering means for filtering the extracted data in response to filter data 
received from a portable security module. 

20 11. A decoder according to Claim 10, wherein the first filtering means is 
configurable in response to an identifier of said particular security module system 
received from said security module. 

12. A decoder according to any of Claims 9 to 11, wherein said second filtering 
25 means comprises a plurality of filters, at least one of said filters being configurable 

in response to said filter data. 

13. A decoder according to any of Claims 9 to 12, wherein said second filtering 
means is configurable in response to a data pattern included in said filter data. 

30 

14. A decoder according to Claim 13, wherein said second filtering means is 
configurable to filter from the extracted data data having a pattern matching said data 
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pattern included in the filter data. 

15. A decoder according to Claim 13, wherein said second filtering means is 
configurable to not filter from the extracted data data having a pattern matching said 

5 data pattern included in the filter data. 

16. A decoder according to any of Claims 13 to 15, wherein said second filtering 
means is configurable to ignore at least part of said data pattern in response to a data 
masking pattern included in said filter data. 

10 

17. A decoder according to any preceding claim, comprising means for forwarding 
to the security module conditional access data included in the packetised data. 

18. A decoder according to Claim 17, wherein the conditional access data 
15 forwarded to the security module comprises entitlement control messages (ECMs) 

and/or entitlement management messages (EMMs). 

19. A decoder according to any preceding claim, wherein the filter data provided 
by the security module comprises data used by the filtering means to extract group 

20 and/or individual entitlement management messages addressed to the security module. 

20. A decoder according to any of Claims 17 to 19, wherein the decoder is 
adapted to receive a control word generated by the security module in response to the 
conditional access data forwarded thereto, the control word being used by the decoder 

25 to descramble a scrambled transmission. 

21 . A decoder according to any preceding claim adapted to encrypt and/or decrypt 
communications to and from the portable security module. 

30 22. A portable security module for use with a decoder as claimed in any preceding 
claim, said security module comprising memory means for storing an identifier of a 
particular system of the security module and means for communicating the identifier 
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to the decoder to configure the decoder. 



23. A portable security module according to Claim 22, comprising means for 
storing filter data and means for communicating the filter data to filtering means in 
5 the decoder. 



24. A portable security module according to Claim 22 or 23 comprising a 
smartcard. 



10 25. A method of processing a transport packet stream comprising packetised data 
encapsulated within the packet pay loads, said method comprising the steps at a 
decoder of: 

receiving an identifier of a particular security module system from a portable 
security module; 

15 configuring the decoder in response to the received identifier; 

receiving filter data for filtering packetised data associated with said particular 
security module system from the portable security module; and 

filtering said packetised data in response to said received filter data. 



20 26. A method according to Claim 25, wherein the packetised data is filtered to 
extract data associated with said particular security module system. 

27. A method according to Claim 25 or 26, wherein said identifier comprises an 
identifier of a particular conditional access system. 

25 

28. A method according to Claim 27, wherein transport packets containing a 
program map table and a conditional access table are extracted from said packetised 
data. 



30 



29. A method according to Claim 28, wherein the packetised data is filtered in 
response to the received identifier and data contained in the program map table and 
the conditional access table. 
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30. A method according to any of Claims 25 to 29, wherein said identifier 
comprises an identifier of a particular debiting system used by the security module. 

31. A method according to any of Claims 25 to 30, wherein said identifier 
5 comprises an identifier of a particular crediting system used by the security module. 

32. A method according to any of Claims 25 to 31, wherein the filter data 
comprises at least a table identifier or a section identifier for the packetised data. 

10 33. A method according to any of Claims 25 to 32, wherein the packetised data 
is filtered according to a data pattern included in the filter data. 

34. A method according to Claim 33, wherein data having a pattern matching said 
data pattern is filtered from the packetised data. 



35. A method of processing a transport packet stream comprising packetised data 
encapsulated within the packet payloads, said method comprising the steps at a 
decoder of: 

extracting from the packetised data data associated with a particular security 
20 module system; and 

filtering the extracted data in response to filter data received from a portable 
security module. 

36. A method according to Claim 35, wherein an identifier of said particular 
25 security module system is received from said security module. 

37. A method according to any of Claims 25 to 36, wherein conditional access 
data included in the extracted data is forwarded to the security module. 



15 



30 



38. A method according to Claim 37, wherein the conditional access data 
forwarded to the security module comprises entitlement control messages (ECMs) 
and/or entitlement management messages (EMMs). 
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39. A method according to any of Claims 25 to 38, wherein the filter data 
provided by the security module comprises data used by the decoder to extract group 
and/or individual entitlement management messages addressed to the security module. 

5 40. A method according to any of Claims 37 to 39, wherein the a control word 
is generated by the security module in response to the conditional access data 
forwarded thereto, the control word being used by the decoder to descramble a ■ 
scrambled transmission. 

10 41. A decoder substantially as herein described. 

42. A portable security module substantially as herein described. 



15 



43. A method of processing a transport packet stream substantially as herein 
described. 
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